CVE-2026-68366

The CVE concerns the Linux kernel USB gadget UVC path. In uvc_send_response, the code builds a control response from a user-supplied uvc_request_data and sets req->length = min(uvc->event_length, data->length). The operation then memcpy(req->buf, data->data, req->length). Since ...

EUVD-2026-55467

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: clamp SENDRESPONSE length to the response buffer uvcsendresponse builds the UVC control response from a user-supplied struct uvcrequestdata: req-length = mintunsigned int, uvc-eventlength, data-length;...

Linux Distros Unpatched Vulnerability : CVE-2026-43184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes ...

The vulnerability of the `ioctl_send_response()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ioctlsendresponse function in the Linux operating system is related to the lack of memory release. Exploiting this vulnerability could allow an attacker to trigger a service failure...